Skip to content
OpenAdvisories
High · 8.8 CVE-2026-111853 EUVD-2026-103206GHSA-r8hj-gr47-x24w

An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. An OS command injection vulnerability exists in the FILESystem:MOU…

Published Oct 17, 2026 · Updated Oct 19, 2026 · Assigned by mitre

Description

An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. An OS command injection vulnerability exists in the FILESystem:MOUNT:DRIve SCPI command handler. Insufficient neutralization of user-supplied input allows remote attackers to execute arbitrary operating system commands with elevated privileges.

Affected products

VendorProductAffectedFixed
Tektronix 3 Series MDO < 1.21.1 1.21.1

References